smctrl /usr/sbin/sendmail hardcoded !

Use this forum for questions regarding adoption and functionality of OpenEMM

Moderator: moderator

dtouzeau
Posts: 10
Joined: Tue Jul 26, 2011 12:15 pm
Contact:

smctrl /usr/sbin/sendmail hardcoded !

Post by dtouzeau »

Dear

For compatibilities purpose we have created a dedicated SendMail instance located in /home/openemm/sendmail/sbin/sendmail

But the smctrl have hardcoded the following files

/usr/sbin/sendmail
/etc/init.d/sendmail

Is it possible to specifiy an another path for these files in order to make it works ?
Funder of Artica Open source project
http://www.artica.fr
Open Linux for Newbee....
maschoff
Site Admin
Posts: 2597
Joined: Thu Aug 03, 2006 10:20 am
Location: Munich, Germany
Contact:

Re: smctrl /usr/sbin/sendmail hardcoded !

Post by maschoff »

smctrl runs setuid root which can be a potential security risk. But to allow the configuration of the paths for the executable sendmail files is a much higher security risk. We would suggest instead an external configuration file
a) in a directory which can only be written by root (like /etc) and
b) which can only read and written by root.
Then, smctrl could be enhanced that it reads the path from the config file only if a) and b) are true.
OpenEMM Maintainer
Post Reply